Route Origin Authorization

$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa
File:                     35392e38312e3130362e302f32332d3233203d3e203137363231.roa (raw, json)
Hash identifier:          /9y4Iy9TTlqJuaJtGp2OC+Xcc+BIsss7c1pAAQwdJgw=
Subject key identifier:   C0:2A:DD:29:74:E8:1E:7B:57:39:CB:3E:81:BD:BC:23:D2:7C:EF:14
Certificate issuer:       /CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
Certificate serial:       56C7CBFC40A976A77B972C98BC1A0872EFFA3F5C
Authority key identifier: 92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D
Authority info access:    rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
Subject info access:      rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa
Signing time:             Wed 10 Jun 2026 11:45:57 +0000
ROA not before:           Wed 10 Jun 2026 11:40:57 +0000
ROA not after:            Wed 09 Jun 2027 11:45:57 +0000
asID:                     17621
IP address blocks:        59.81.106.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.mft
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
                          rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 12 Jun 2026 19:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:c7:cb:fc:40:a9:76:a7:7b:97:2c:98:bc:1a:08:72:ef:fa:3f:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9256C7E8713211251A9F619DBC38D99394ABAA9D
        Validity
            Not Before: Jun 10 11:40:57 2026 GMT
            Not After : Jun  9 11:45:57 2027 GMT
        Subject: CN=C02ADD2974E81E7B5739CB3E81BDBC23D27CEF14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1a:d7:a8:9b:f8:0d:e7:62:1d:4f:51:1b:16:
                    16:63:a5:0c:bd:e5:c6:c7:1b:91:bb:9e:d7:0a:9e:
                    83:b1:58:0c:34:4a:43:01:c4:30:be:a9:5b:c6:e5:
                    a1:2c:cc:17:66:a1:c7:89:61:2f:a8:00:cf:52:b4:
                    19:fa:51:dd:19:98:a8:f7:8a:80:69:76:38:38:f1:
                    d7:51:6d:6b:23:d4:d1:a4:6f:e3:bc:0d:36:51:85:
                    a4:51:0e:c9:87:74:77:3c:8b:a2:c9:8e:b4:a5:18:
                    e1:53:b7:e9:4a:8c:44:d1:91:cf:83:be:93:88:ce:
                    83:d3:5f:89:52:ff:6a:33:71:5f:e9:f4:d8:7d:e1:
                    0a:08:34:0e:ef:4d:82:4e:d5:2b:0f:48:8b:f5:b1:
                    0e:0f:90:2a:a0:67:d4:d2:14:81:99:7c:87:33:77:
                    7c:38:f9:e5:a7:4f:a1:84:fe:46:88:9f:8a:11:9d:
                    53:f4:fc:bb:ad:60:9d:b6:82:44:8d:5a:c0:33:e6:
                    ec:da:4a:82:8d:d4:ff:37:9b:b6:fd:a6:3a:b8:bc:
                    38:e9:91:10:18:11:2a:be:93:ed:d6:71:76:c8:42:
                    a5:ec:94:ea:d2:42:21:5f:8d:f7:a4:82:b6:3a:28:
                    00:8e:5f:ee:0f:c0:2c:e6:f8:c6:73:6f:d9:f7:7c:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2A:DD:29:74:E8:1E:7B:57:39:CB:3E:81:BD:BC:23:D2:7C:EF:14
            X509v3 Authority Key Identifier:
                keyid:92:56:C7:E8:71:32:11:25:1A:9F:61:9D:BC:38:D9:93:94:AB:AA:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/9256C7E8713211251A9F619DBC38D99394ABAA9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/9256C7E8713211251A9F619DBC38D99394ABAA9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1096708749504020482/0/35392e38312e3130362e302f32332d3233203d3e203137363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  59.81.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         24:0d:01:e4:c0:63:2a:d2:11:1e:62:b0:66:45:67:4b:ed:74:
         53:82:aa:f7:11:4c:b3:c5:df:3c:5f:29:94:d3:55:01:91:9d:
         d1:8e:b0:21:a1:ac:f5:71:26:1a:e6:f0:78:a2:ee:77:6a:83:
         e7:5c:03:1d:80:bd:e8:b7:7e:db:3c:40:f6:38:20:66:47:4a:
         92:5b:fa:ea:57:1c:85:1a:22:68:c0:49:6d:02:38:ee:29:bd:
         01:c8:d5:c0:29:d1:16:da:a8:40:be:56:fd:65:e7:5f:38:08:
         cf:ca:8f:48:e6:5a:18:78:b4:64:70:18:bd:18:2e:4d:f5:66:
         12:28:fd:77:5a:fa:47:cb:a2:66:73:09:58:05:01:3b:5b:0c:
         38:1a:82:cb:b8:a6:3e:8c:4a:15:34:b9:8f:8e:82:a0:05:fc:
         1a:f7:6e:2b:09:ac:de:a4:09:d0:59:3d:50:a1:92:85:87:dc:
         70:55:a8:d2:5f:cd:26:42:47:e9:2e:6e:89:42:36:88:eb:01:
         2f:3c:54:fa:fc:7a:65:2b:39:b0:06:59:d9:75:ec:2f:2d:9a:
         a4:4d:e9:e5:75:cd:80:f5:2c:5a:c0:a3:70:99:d1:22:bb:ab:
         f9:61:67:fc:68:d2:40:5d:36:2c:98:e8:fd:e6:f9:c8:cb:04:
         3f:e1:81:1b
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIUVsfL/ECpdqd7lyyYvBoIcu/6P1wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5
NEFCQUE5RDAeFw0yNjA2MTAxMTQwNTdaFw0yNzA2MDkxMTQ1NTdaMDMxMTAvBgNV
BAMTKEMwMkFERDI5NzRFODFFN0I1NzM5Q0IzRTgxQkRCQzIzRDI3Q0VGMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGteom/gN52IdT1EbFhZjpQy9
5cbHG5G7ntcKnoOxWAw0SkMBxDC+qVvG5aEszBdmoceJYS+oAM9StBn6Ud0ZmKj3
ioBpdjg48ddRbWsj1NGkb+O8DTZRhaRRDsmHdHc8i6LJjrSlGOFTt+lKjETRkc+D
vpOIzoPTX4lS/2ozcV/p9Nh94QoINA7vTYJO1SsPSIv1sQ4PkCqgZ9TSFIGZfIcz
d3w4+eWnT6GE/kaIn4oRnVP0/LutYJ22gkSNWsAz5uzaSoKN1P83m7b9pjq4vDjp
kRAYESq+k+3WcXbIQqXslOrSQiFfjfekgrY6KACOX+4PwCzm+MZzb9n3fJuNAgMB
AAGjggIRMIICDTAdBgNVHQ4EFgQUwCrdKXToHntXOcs+gb28I9J87xQwHwYDVR0j
BBgwFoAUklbH6HEyESUan2GdvDjZk5Srqp0wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud
HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5
NjcwODc0OTUwNDAyMDQ4Mi8wLzkyNTZDN0U4NzEzMjExMjUxQTlGNjE5REJDMzhE
OTkzOTRBQkFBOUQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5
bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1
LzEvOTI1NkM3RTg3MTMyMTEyNTFBOUY2MTlEQkMzOEQ5OTM5NEFCQUE5RC5jZXIw
gYoGCCsGAQUFBwELBH4wfDB6BggrBgEFBQcwC4ZucnN5bmM6Ly9ycGtpLXJwcy5j
bm5pYy5jbi9yZXBvL0ExMDk2NzA4NzQ5NTA0MDIwNDgyLzAvMzUzOTJlMzgzMTJl
MzEzMDM2MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEzNzM2MzIzMS5yb2EwGAYD
VR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEATtRajANBgkqhkiG9w0BAQsFAAOCAQEAJA0B5MBjKtIRHmKwZkVnS+10U4Kq
9xFMs8XfPF8plNNVAZGd0Y6wIaGs9XEmGubweKLud2qD51wDHYC96Ld+2zxA9jgg
ZkdKklv66lcchRoiaMBJbQI47im9AcjVwCnRFtqoQL5W/WXnXzgIz8qPSOZaGHi0
ZHAYvRguTfVmEij9d1r6R8uiZnMJWAUBO1sMOBqCy7imPoxKFTS5j46CoAX8Gvdu
Kwms3qQJ0Fk9UKGShYfccFWo0l/NJkJH6S5uiUI2iOsBLzxU+vx6ZSs5sAZZ2XXs
Ly2apE3p5XXNgPUsWsCjcJnRIrur+WFn/GjSQF02LJjo/eb5yMsEP+GBGw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 02:24:09 2026 by rpki-client